MS Graph presence - forbidden 403 error

Question

I'm getting 403 forbidden error in my SPFx web part when trying to access Teams presence (mine and other users as well). I have set permissions in package-solution:

Permissions:

  {
    "resource": "Microsoft Graph",
    "scope": "Presence.Read"  
  },
  {
    "resource": "Microsoft Graph",
    "scope": "Presence.Read.All" 
  }

Call for presence:

this.context.msGraphClientFactory
.getClient()
.then((client: MSGraphClient) => {

  client
    .api(`users/{username}/presence`)
    .version("beta")
    .get((err, res) => {  
      if (err) {
        alert(JSON.stringify(err));
        return;
      }
      console.log(res);         
    });
});

Any idea what is wrong please?

Answer 1

You can also get the user's presence using MSGraphClient in SPFx.

Get the Graph Client using:

import { MSGraphClient } from '@microsoft/sp-http';
...

private _graphHttpClient: MSGraphClient;

return new Promise((resolve, reject) => {
      this.context.msGraphClientFactory.getClient().then(client => {
        this._graphHttpClient = client;
        resolve();
      }).catch(error => {
        console.log(error);
        reject(error);
      });
    });

Then you can get the presence of user using:

const endpoint: string = `https://graph.microsoft.com/beta/communications/getPresencesByUserId`;
const response: any = await this.props.graphHttpClient.api(endpoint).post({
    "ids": users  //Here you need to pass the user ID's
});
const graphResponse: any = response.value;

Check the complete code at GitHub SPFx webpart sample:

Reference: react-members-with-presence.

Answer 2

You need to approve the permissions in your SharePoint admin center first before you can make Graph requests, and each Graph permission you need will require approval.

Create a package to upload to your Apps library (it doesn't matter that it isn't ready for deployment) and then after you've done that, go to SharePoint admin and go to the API Access under advanced, then look for your Graph permissions and approve them. I shared an image of my admin with permission waiting for approval

Now you can get back to building out your spfx and testing the web calls without getting 403 :)

edit Your spfx package must have the permissions you require in the package-solution.json before you upload it to the Apps library